summaryrefslogtreecommitdiffstats
path: root/Doc/library/xml.sax.rst
diff options
context:
space:
mode:
authorChristian Heimes <christian@cheimes.de>2013-03-26 16:35:55 (GMT)
committerChristian Heimes <christian@cheimes.de>2013-03-26 16:35:55 (GMT)
commit7380a67267d9ec59b70617ea59ff31819f530942 (patch)
tree0648f9c8a5594f0c90ef45c9aefa43440ca7128a /Doc/library/xml.sax.rst
parent5be6d74a0d0ae111cd823d2b7a5896c77d8c8895 (diff)
downloadcpython-7380a67267d9ec59b70617ea59ff31819f530942.zip
cpython-7380a67267d9ec59b70617ea59ff31819f530942.tar.gz
cpython-7380a67267d9ec59b70617ea59ff31819f530942.tar.bz2
Issue 17538: Document XML vulnerabilties
Diffstat (limited to 'Doc/library/xml.sax.rst')
-rw-r--r--Doc/library/xml.sax.rst8
1 files changed, 8 insertions, 0 deletions
diff --git a/Doc/library/xml.sax.rst b/Doc/library/xml.sax.rst
index 1bf55b4..d5c56b6 100644
--- a/Doc/library/xml.sax.rst
+++ b/Doc/library/xml.sax.rst
@@ -13,6 +13,14 @@ Simple API for XML (SAX) interface for Python. The package itself provides the
SAX exceptions and the convenience functions which will be most used by users of
the SAX API.
+
+.. warning::
+
+ The :mod:`xml.sax` module is not secure against maliciously
+ constructed data. If you need to parse untrusted or unauthenticated data see
+ :ref:`xml-vulnerabilities`.
+
+
The convenience functions are: